From 89a94e9b2c42680184da5cd7063bf04b8626b367 Mon Sep 17 00:00:00 2001 From: Ahmed AbdelHalim Date: Tue, 23 Jun 2026 17:25:51 +0200 Subject: Reorder ssh keygen to avoid issues of starting ssh before keys existing --- roles/ssh/tasks/main.yml | 30 +++++++++++++++--------------- 1 file changed, 15 insertions(+), 15 deletions(-) diff --git a/roles/ssh/tasks/main.yml b/roles/ssh/tasks/main.yml index 9fc0f51d..15eca2cc 100644 --- a/roles/ssh/tasks/main.yml +++ b/roles/ssh/tasks/main.yml @@ -8,21 +8,6 @@ name: "{{ ssh_package }}" state: "present" -- name: "Ensure ssh service is enabled" - become: true - ansible.builtin.service: - name: "{{ ssh_service }}" - state: "started" - enabled: true - when: not ansible_facts['is_chroot'] - -- name: "(chroot): Ensure ssh service is enabled" - # noqa: command-instead-of-module intentional isnide chroot - ansible.builtin.command: - cmd: "systemctl enable {{ ssh_service }}" - when: ansible_facts['is_chroot'] - changed_when: true - - name: "Generate /etc/ssh/ RSA host key" become: true ansible.builtin.command: @@ -41,6 +26,21 @@ cmd: "ssh-keygen -q -t ed25519 -f /etc/ssh/ssh_host_ed25519_key -C '' -N ''" creates: "/etc/ssh/ssh_host_ed25519_key" +- name: "Ensure ssh service is enabled" + become: true + ansible.builtin.service: + name: "{{ ssh_service }}" + state: "started" + enabled: true + when: not ansible_facts['is_chroot'] + +- name: "(chroot): Ensure ssh service is enabled" + # noqa: command-instead-of-module intentional isnide chroot + ansible.builtin.command: + cmd: "systemctl enable {{ ssh_service }}" + when: ansible_facts['is_chroot'] + changed_when: true + - name: "Configure sshd_config" become: true ansible.builtin.copy: -- cgit v1.2.3